{"id":"CVE-2022-26052","state":"PUBLISHED","title":"Uncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation ","description":"Uncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-02-16T19:59:50.826Z","updatedAt":"2025-01-27T18:23:48.274Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit"],"affected":[{"vendor":"n/a","product":"Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit","defaultStatus":"unaffected","versions":[{"version":"before version 2021.6","status":"affected"}]}],"references":["http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:49.689Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/26xxx/CVE-2022-26052.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-26052","state":"PUBLISHED","datePublished":"2023-02-16T19:59:50.826Z","dateUpdated":"2025-01-27T18:23:48.274Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2022-03-09T23:14:09.642Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit","defaultStatus":"unaffected","versions":[{"version":"before version 2021.6","status":"affected"}]}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-02-16T19:59:50.826Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T04:56:36.922Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-27T17:30:24.459104Z","id":"CVE-2022-26052","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-27T18:23:48.274Z"}}]}}}